3

I often need to get several passwords from my Keepass during the same day and I find myself having to open it and input the master password every single time, which is awfully laborious. The obvious solution to this problem would be to leave it opened permanently, but is it secure?

(I know I can "lock" it but I'd still have to input master password each time so not really satisfactory option)

  • 4
    This really depends on where you're going, if you're sitting in your apartment all alone then it's probably safe. Basically the biggest issue here would be someone using the device while you're away, but you should never leave your device unattended. – sethmlarson Feb 18 '16 at 23:50
  • Yep living alone, I'm just worried about some trojan/malware being able to access all my passwords since Keepass is left open on my computer (and hence the master password barrier is gone) – drake035 Feb 19 '16 at 12:01
6

It is safe if your computer is safe from unauthorized access. This includes malware.

If your computer is not physically safe, then no, anyone can access your Keepass. If your computer has malware on it, it can also access your Keepass if it is left unencrypted.

1

When you have it open, it is as safe as the computer, especially if you dont have auto lock enabled.

It is vulnerable against: physical access malware basically anything that can access your computer. If you can prevent those + some less prevalent ones, it´s safe, but if you cannot, i would not risk it

  • Malware can just as easily access the data in the short period of time while the password store is unlocked, as at some other point in time. That particular threat wouldn't depend on the password store remaining unlocked for any significant amount of time. – a CVn Feb 20 '16 at 12:23
  • Well of course, it was meant as an example of direct dangers to the system. – Ladislav Louka Feb 20 '16 at 13:30
  • Are you absolutely sure about that? I mean if Keepass is opened on my computer with all passwords listed on my screen, then surely some malware could access to these more easily than if Keepass was closed isn't it? – drake035 Feb 22 '16 at 18:03
  • 1
    Yeah but the point is that leaving it open open on infected computer is no different from just logging in. The time period is irrelevant for this kind of attack. Only one thing comes to mind which is RAT (remote access trojan), which would benefit for you not being at the computer. Other kinds of infection would more likely try to extract data from inputs, memory or other sources then direct control – Ladislav Louka Feb 23 '16 at 13:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.